https://kilatlabs.com/journal/ Notes from the studio on Hyvä, Magento, Shopify Plus, Flutter, automation, motion and the craft of shipping premium digital products. en https://kilatlabs.com/journal/shopify-hydrogen-framework-agnostic-preview/ https://kilatlabs.com/journal/shopify-hydrogen-framework-agnostic-preview/ Thu, 18 Jun 2026 00:00:00 GMT Shopify is pulling Hydrogen's cart, product and money logic out of React Router into framework-agnostic primitives, so headless teams can pick any JS stack. https://kilatlabs.com/journal/shopify-metafield-definitions-customer-account-api/ https://kilatlabs.com/journal/shopify-metafield-definitions-customer-account-api/ Wed, 17 Jun 2026 00:00:00 GMT Shopify now hides app metafields from the Customer Account API unless they carry a definition, so headless storefronts that skipped the schema break silently. https://kilatlabs.com/journal/hyva-vs-luma-250-user-load-test/ https://kilatlabs.com/journal/hyva-vs-luma-250-user-load-test/ Wed, 10 Jun 2026 00:00:00 GMT A 250-user load test puts Hyvä at 5.2x faster than Luma on median response, but the p95 numbers tell a harder truth about uncached Magento under load. https://kilatlabs.com/journal/shopify-silent-sso-headless-checkout/ https://kilatlabs.com/journal/shopify-silent-sso-headless-checkout/ Tue, 09 Jun 2026 00:00:00 GMT Shopify just renamed the silent SSO parameter for headless checkout from logged_in=true to sso=silent. The shift signals where Customer Account API is heading. https://kilatlabs.com/journal/hyva-ai-search-doofinder-41-percent-ctr/ https://kilatlabs.com/journal/hyva-ai-search-doofinder-41-percent-ctr/ Mon, 08 Jun 2026 00:00:00 GMT A Hyvä storefront paired with a Doofinder AI assistant just shipped a 41 percent click-through rate from conversation to product. Here is why it matters. https://kilatlabs.com/journal/php-8-4-22-cves-magento-stacks/ https://kilatlabs.com/journal/php-8-4-22-cves-magento-stacks/ Fri, 05 Jun 2026 00:00:00 GMT PHP 8.4.22 and 8.5.7 just shipped ten CVE fixes, including a SOAP use-after-free and an FPM XSS. Magento 2.4.9 stacks need the rollout in production now. https://kilatlabs.com/journal/node-js-26-3-permission-drop-bff-hardening/ https://kilatlabs.com/journal/node-js-26-3-permission-drop-bff-hardening/ Thu, 04 Jun 2026 00:00:00 GMT Node.js 26.3.0 adds permission.drop(), httpValidation and a 64 KiB buffer pool. For headless commerce BFFs, the runtime finally hardens itself after boot. https://kilatlabs.com/journal/shopify-cart-view-key-optimistic-ui/ https://kilatlabs.com/journal/shopify-cart-view-key-optimistic-ui/ Wed, 03 Jun 2026 00:00:00 GMT Shopify just made cart view_key valid in cartLinesUpdate and cartLinesRemove. For headless Plus storefronts, the optimistic cart race condition is finally gone. https://kilatlabs.com/journal/mage-os-beat-shopify-data-ownership-pitch/ https://kilatlabs.com/journal/mage-os-beat-shopify-data-ownership-pitch/ Tue, 02 Jun 2026 00:00:00 GMT Mage-OS just published the pitch that won a 900-person German publisher back from Shopify. The argument: AI commoditises features, data ownership is the moat. https://kilatlabs.com/journal/what-ecommerce-automation-actually-costs-and-saves/ https://kilatlabs.com/journal/what-ecommerce-automation-actually-costs-and-saves/ Mon, 01 Jun 2026 00:00:00 GMT Automation is sold as a magic button. It is really a trade: engineering hours now against manual hours and errors forever. Here is how we scope that trade honestly. https://kilatlabs.com/journal/hyva-enterprise-all-inclusive-adobe-commerce/ https://kilatlabs.com/journal/hyva-enterprise-all-inclusive-adobe-commerce/ Mon, 01 Jun 2026 00:00:00 GMT Hyvä just relaunched Hyvä Enterprise as an All-Inclusive suite for Adobe Commerce. B2B, Sensei, Adobe EDS, gift cards and loyalty are bundled at €5,500. https://kilatlabs.com/journal/shopify-agents-md-llms-txt-liquid-templates/ https://kilatlabs.com/journal/shopify-agents-md-llms-txt-liquid-templates/ Fri, 29 May 2026 00:00:00 GMT Shopify just made agents.md, llms.txt and llms-full.txt overridable via Liquid templates. The brand voice your AI shopping agent hears is now yours to set. https://kilatlabs.com/journal/shopify-app-home-preact-ui-extension/ https://kilatlabs.com/journal/shopify-app-home-preact-ui-extension/ Thu, 28 May 2026 00:00:00 GMT Shopify just shipped App Home as a Preact admin UI extension. For studios building custom Plus apps, the iframe shell finally has a serious alternative now. https://kilatlabs.com/journal/magento-2-4-9-biggest-framework-jump-since-2-0/ https://kilatlabs.com/journal/magento-2-4-9-biggest-framework-jump-since-2-0/ Mon, 25 May 2026 00:00:00 GMT Magento 2.4.9 GA drops Laminas MVC, TinyMCE and PHP 8.2, lands Symfony 7.4 and native PHP OAuth. For Hyvä studios, this is the upgrade you cannot defer. https://kilatlabs.com/journal/flutter-3-44-unbundles-material-cupertino/ https://kilatlabs.com/journal/flutter-3-44-unbundles-material-cupertino/ Fri, 22 May 2026 00:00:00 GMT Flutter 3.44 pulls Material and Cupertino out of the core SDK into independently versioned packages. For mobile studios that means new dependency hygiene. https://kilatlabs.com/journal/shopify-next-gen-events-end-webhook-glue/ https://kilatlabs.com/journal/shopify-next-gen-events-end-webhook-glue/ Thu, 21 May 2026 00:00:00 GMT Shopify's Next Gen Events bring field-level triggers, GraphQL payloads and edge filters. The middleware tax on Plus integrations is finally going away. https://kilatlabs.com/journal/starting-a-journal/ https://kilatlabs.com/journal/starting-a-journal/ Wed, 20 May 2026 00:00:00 GMT A short note on what we plan to write about, and why the studio is making editorial work a first-class part of how we share what we build.